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for each user-initiated measure aiming at processing of a 
given data element value (DV) in the first database (O-DB) , 
initially producing a calling to the data element protection 
catalogue for collecting the protection attribute/attributes 
associated with the corresponding data element type, and 

controlling the user's processing of the given data element 
value in conformity with the collected protection 
attribute/attributes . 

8. (Twice Amended) An apparatus for processing data tnat is to 
be protected, comprising: 

a first database (O-DB) for storing said data as encrypted 
data element values (DV) in records (P) , said first database (O-DB) 
having a table structure with rows and columns, each row 
representing a record (P) and each combination of a row and a 
column representing a data element value (DV) , in said first 
database (O-DB) each data element value (DV) is [being] linked to 
a corresponding data element type (DT) ; 

a second database (IAM-DB) for storing a data element 
protection catalogue (DPC), which contains each individual data 
element type (DT) and one or more protection attributes stating 
processing rules for data element values (DV) , which in the first 



- 3 - 






Appl. No. 09/027,585 

database (O-DB) are linked to the individual data element type 
(DT) ; 

means which are adapted, in each user-initiated measure aiming 
at processing a given data element value (DV) in the first database 
(O-DB) , to initially produce a calling to the data element 
protection catalogue for collecting the protection 
attribute/attributes associated with the corresponding data element 
types, and 

means which are adapted to control the user's processing of 
the given data element value in conformity with the collected 
protection attribute/attributes . 

9. (Amended) A method for processing of confidential data 
comprising the steps of: 

providing a first database (P-DB) , a second database (O-DB), 
and a third database (IAM-DB) , the second database (O-DB) having 
a table structure with rows and columns, each row representing a 
record (P) and each combination of a row and a column representing 
a data element value (DV), in the second database (O-DB) each data 
element value (DV) is linked to a corresponding data element type 
(DT) of a plurality of different data element types ; 

entering descriptive information (DI) corresponding to a data 
element value (DV) , with certain portions of the descriptive 
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information being classified as certain data element types (DT) of 
the [a] plurality of different data element types; 

assigning an initial identity (OID) to the descriptive 
information; 

storing a first record in the first database including in the 
initial identity; 



encrypting the initial identity to form a storage identity 
(SID) ; 



accessing a catalogue (DCP) of encryption protection degrees 
in the third database, the catalogue including encryption levels 
for each of the different data types; 

encrypting the certain portions of the descriptive information 
in accordance with their data types; and 

storing a second record in the second database including the 
storage identity and the encrypted descripti ve information (DV) . 

" REMARKS 

Applicant thanks the Examiner for the very thorough 
consideration given the present application. 

Claims 1-17 are now present in this application. Claims 1, 
8 and 9 are independent. Claims 1, 8 and 9 have been amended. 
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